Skip to content
OpenAdvisories
Unscored DSA-1557-1 3 CVEs

phpmyadmin - several vulnerabilities

Published Apr 24, 2008 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 4.0 phpmyadmin 4:2.9.1.1-7

Vulnerabilities 3

  • Unscored —

    phpMyAdmin before 2.11.5 accesses $_REQUEST to obtain some parameters instead of $_GET and $_POST, which allows attacke…

  • Unscored —

    phpMyAdmin before 2.11.5.1 stores the MySQL (1) username and (2) password, and the (3) Blowfish secret key, in cleartex…

  • Unscored —

    Unspecified vulnerability in phpMyAdmin before 2.11.5.2, when running on shared hosts, allows remote authenticated user…